skysight-inc/HackerNews huggingface dataset:
Don't do this. Your implementation does not work if someone invokes the dscriptor's __get__ by hand which is not uncommon. My implementation takes the shortcut but also still does the correct thing if you keep a reference to the property object.
Why not just hold elections on a Saturday like Australia and many other countries do?
it's something someone would do who's never worked with authentication and authorization before and doesn't have the fallback of a professional tester (aka breaker).

As people have mentioned, rails doesn't have it built in. I've used gems to provide it since I don't trust myself to write good enough security algorithms (and really, why reinvent the wheel if I don't have to).

In .net we can use the asp.net membership. But you've always got to have that authorization part, which I think can get forgotten about unless you've got a system under you belt or something/someone to crib from.

Sometimes you just don't think, and sometimes it becomes very public.
I was also confused at the choice of default. Fortunately you can update your config to support any TLD:

http://pow.cx/manual#section_3.1
FastGlacier - A Windows Client for Amazon Glacier
This is exactly the same thing - an obvious security oversight that resulted in private information being disclosed, simply by modifying the URL.

The fact that the results are so different is irrelevant - the attack vector was essentially the same.

Also, even with the complete lack of security on this site, it should still not be possible to take any action on the victim's AWS account. IAM has read-only roles for this exact reason - hopefully no-one was negligent enough to post their master AWS key/secret in to this or any other third-party site.
My only gripe with linode is that they are unable to handle DoS attacks. If you're subjected to an attack, your linode will be shut off (null routed) for 24 hours. After that time, they'll check to see if it's still being attacked.

I really think they could do a lot better than that. Apart from that gripe, they're a great VPS host.
Yep, that's what I meant, thanks.

EDIT: Actually, it looks like they can decrypt your data to restore it on their end, so it's a no.
Everyone is learning something here, no need to insult someone because they might not know something you know. I bet you don't know something he knows.
Thanks for the help earlier today!
>> Give me DIALS and KNOBS.

This. I much preferred the click wheel and button of my old iPod Nano to the touchscreen of my new one. I could pause, skip, rewind, and adjust the volume on the old one without looking at it.
I agree with you and have done so in the past. Quietly telling the developers of a website that they have large vulnerabilities that allow me to gain almost complete access to large numbers of accounts.

With things like that, especially when revealing it could lead to people using the vulnerability maliciously I don't think it is ethical to release details of it, unless they don't make any indication they are going to fix it.

It is bothersome when they don't even thank you for bringing it to their attention however.
This is an excellent suggestion. Thanks!
Ask HN: Is this pseudocode client side login algorithm secure?
on new user login:
1)generate a random assignment of prime numbers to permissable characters for a new username/password entry and save it as tempTransform.json, save a copy to rawTransforms.json
2)translate username and password to integers using this list, then add them together and save the resulting integer in userHashes.html
3)add the username, password, and userHash and use the sum to encrypt tempTransform.json, then save it as userHashTransform.json;
4)on subsequent user login, take entered username and passwords add them together using all available rawTransforms looking for userHashTransform collisions. decrypt with sum if username, password, and user hash. if alphabets match, authenticate user.

essentially you create a huge solution space problem only the right username/password combo can solve in reasonable time.

i bet that samsonite, I'm way off, but please tell me how to protect user data with a client side only js/css3/html5/bootstrap site? I want an open source drop in js login script we can all verifiably agree is secure so this doesn't happen to me.
By the way, here are the first 2263 diagrams: http://jumpshare.com/v/R7nRxZ?b=27itKy. It's a renamed bzipped tar. Extract with:

tar xjf factors.mp3

It extracts to a directory named 'factors' to about 30 mb total.
Minnesota Vikings vs Tennessee Titans live stream watch here NFL online
Minnesota Vikings vs Tennessee Titans live stream watch here NFL
online football Regular season 2012 Week 5 and also enjoy full season
Match scheduled: Date: SUN, OCT 7 2012 Time: 4:25 PM (ET)NFL Regular
season 2012 Week 5 venu: Mall of America Field
That's a dick move. You should own up to your mistake.
Great to see someone tackling this space ... lots of applications for collaborative teams that are only just starting to be explored.
For family photos and unedited family videos I could probably actually wait that long in the even of a catestrophic loss of all my local copies.

I'd prefer the speed/cost interface to be at download time. Give the opportunity to reorder the download sequence to prioritise some parts and probably transfer to S3 so the local computer doesn't need to be running throughout the whole data trickle.

That's a useful service that I can't be bothered to build at the moment.
Anyone have any thoughts on how they might be doing 'automatic' memory/resource leak detection (Section 6.0)? Seems to me it would be hard to do without generating lots of false positive failures.
what about if I don't have internet?
Well, since you're volunteering... this is C rather than C++, but if you're interested in GStreamer (media processing library) and OpenCV (computer vision / image processing) then you could have a go at improving the motion-detection visualisation of our "stbt-motiondetect" gstreamer element.

If you're interested send me an email for help getting started, and see the 2 latest commits on https://github.com/drothlis/stb-tester/commits/motiondetect_...
Hi sausheong. It would be nice if there are more information (e.g. videos) showing how it works. I don't think many people will want to sign up to something they have no idea about just to try.
"We have always been shameless about stealing great ideas."

Triumph of the Nerds (1996)

source: http://en.wikiquote.org/wiki/Steve_Jobs
Thanks for the feedback. It's a good idea and I'm on it.
It's a cloud based service :)
There is no clear definition for the edge of the solar system[1]. The Voyager spacecraft are helping to define it.

The heliopause is a pretty reasonable way to define the edge of the solar system. A stated goal of the Voyager mission is to search for the heliopause boundary[2]:

Both Voyagers are headed towards the outer boundary of the solar system in search of the heliopause, the region where the Sun's influence wanes and the beginning of interstellar space can be sensed. The heliopause has never been reached by any spacecraft; the Voyagers may be the first to pass through this region, which is thought to exist somewhere from 8 to 14 billion miles from the Sun. This is where the million-mile-per-hour solar winds slows to about 250,000 miles per hour—the first indication that the wind is nearing the heliopause. The Voyagers should cross the heliopause 10 to 20 years after reaching the termination shock.

That having been said, this is a poor title. The news is not that the spacecraft has simply crossed a boundary. The news is that the boundary, until now unknown, was discovered (potentially).

The difference is "Ship successfully crosses Atlantic Ocean" vs "Columbus discovers New World". Perhaps a better title would be "More evidence that Voyager 1 has found the heliopause, considered to be the edge of the solar system".

----

[1] http://en.wikipedia.org/wiki/Solar_System#Farthest_regions

[2] http://voyager.jpl.nasa.gov/mission/interstellar.html
Does anyone know the real reason SQLite was removed form HTML5 specs?

I known official Mozilla arguments. Which are quite week IMHO.

Is this was MS job? They where afraid that browser apps will make desktop apps obsolete?
Sure. If you apply our standards, though, you might want to decry many of your founding fathers as well: Washington, Madison, Jefferson ("All men are created equal"), John Hancock, Benjamin Franklin - they all held slaves at some point.

So, should you rename the capital, the state, and all the avenues and parks that are named after these people?
Agency Telework Coordinators
As an outside observer, the effect of white collar crime would appear to have hit Americans far harder than the crime discussed here - and it's effects have been felt world wide too. Behaviors allowed and encouraged in big banking have been very destructive to lives. And I'll make a safe net that the perpetrators lived in so-called good areas. So while worrying about being car-jacked in the badlands, behavior in the good lands sees your company fail, job lost and car repossessed.
Perhaps a touch overwrought, but another angle to consider.
not as Sublime as the WhiteAlbum number9 ,Julia Fork github?
this uses codeMirror as a core editing component
ace is faster and more code friendly than codeMirror. (multiSelect, indentGuides, folding)
but codemirror is smaller and supports variable width and bidirectional fonts

currently there is no comparable desktop project using ace
but maybe there will be something soon http://www.indiegogo.com/happyedit
I'm curious as to whether you can submit an app to the MAS which integrates with non-MAS apps? Any idea whether Apple allows that?

e.g. so you could offload any frowned-upon functionality into external apps/services, and maybe promote or offer automated download & install functionality within your own app...
http://news.ycombinator.com/item?id=4602638
Leaving PHP, MySQL and Wordpress behind
Initials of the three inventors (discoverers?) of the algorithm: http://en.wikipedia.org/wiki/RSA_(algorithm)
On Hacker News, you cannot delete or edit a comment except during the first 2 hours of the comment's existence.
A few developers I've known have made the case that they just don't see text editing speed as the bottleneck in their day-to-day work. They're perfectly happy with the speed at which they can edit text and that's fine. What gets to me a bit is the dismissive attitude this type of developer tends to take towards usage of Vim, as if using it makes me some sort of misguided autist.

The reason I think it matters is that there are a limited number of hours in the day. When I get home from work I have maybe three or four hours on a good day to make some progress on my own projects. If during that time I can save 10 minutes of holding down arrow keys and carefully maneouvring the mouse cursor around my code and so on, then in a week that's an extra hour or so of extra project time.
He said it was a resourcing issue, they didn't have the resources to patch every phone and considered every option. Except, it seems... paying for more resources?

I'm just glad to be on a Galaxy Nexus with OTA updates direct from Google. Even then the version I was on was configured not to receive OTA updates as it was a Nexus Samsung ROM not a Nexus Google ROM. It took reflashing the Google image using community tools, something that is mostly not possible for most of the population.

I suppose the only solution is greater awareness of the issue, to increase demand for better support
Agreed. You don't even need to add any gems or do any rails magic for this to work. In your controller:

def edit
@aws_credentials = current_user.aws_credentials
end

def update
current_user.aws_credentials.update_attributes(
params[:aws_credentials].slice(:a, :b, :c)
)
end
Do you really want to be making this much money when you're 50?
24-Hour Bookclub
(Ron) Rivest, (Adi) Shamir, (Leonard) Adleman
Why does the on/off functionality look like a slider when it functions like a button?
GuardTime seems like what I was looking for.

Thanks!
talk about blast from the past, I spent a few years looking at a Symbolics machine, though I rarely saw that Genera login, the machine stayed up for days on end.

light-table mode for emacs/common lisp would be neat. As a schemer I think what would be really awesome is to see light-table merged with the emacs/guile/geiser work. Geiser is also trying to resurrect the lisp machine.
Very nice app. It would be nice if you could optionally view the files in a directory when no index file is provided.
Its still IN the world. :)
I don't understand the problem. Why can we upgrade our computers' OSes so easily, while it's impossible to do it for phones? Don't they have drivers for all their parts so you can just plug them in the OS's API and have the newer versions just work?

Why does it take so much work?
What is the advantage you see of tunnelling X like that over just tunnelling the network connections with ssh -D?
So when you want to create an interface that provides a good experience, the less you involve the user the better. The best example to my opinion was given with the Nest stat. It watches you, it learns about you and based upon it's learnings it adapts settings.

That's why Internet of Things will become big. It's not the use case of turning the oven on 20 minutes before coming home yourself. It's about the oven knowing you're eating a prepared lasagna that needs be to in oven for 20 minutes. While driving home all traffic information and your location are used to determine when the oven needs to start its work.
Stuff like this is androids biggest issue. My HTC was supposed to get 2.3, but despite their promises they never did that.
Some of the clipping paths/layer edges on the first one are pretty rough toward the top. But a neat idea. It’s really more a collage than a “hyperphoto”. David Hockney – more known for his paintings than his photography – has done something similar, but with an emphasis on the image being composed of multiple photographs, not attempting to create the illusion of one continuous photo: http://www.hockneypictures.com
The State of Open-Source Monitoring at DevOps Days Rome
SendGrid has a fantastic Parse API for this (available on the free plan): http://docs.sendgrid.com/documentation/api/parse-api-2/
I for one think it's great you're doing updates quickly and often as things come up that warrant pushing updates in the first place. Keep up the good work. This looks like a nifty little tool!
Anything-centrism is a cognitive bias, it reduces complex issues to simple ones designed to suit your world view. It's a pretty nasty ignorance promoting concept.
Another solution for lack of resources would be reducing complexity. They need to release fewer models a year and promote only those throughout the year. Of course they need a lot more resources for upgrades if they release a different model every month.

Rumors say that starting with Android 4.2, and especially with Android 5.0, Google will start upgrading all "Nexus certified" devices (and everyone can make such a device, if they want, under strict rules). I really hope that's true, and I hope the market starts moving towards those devices rather than regular Android ones so it incentivizes manufacturers to build them. I also hope Google intends to upgrade them for 2 years since the phone's launch.

http://androidandme.com/2012/10/news/rumor-android-4-2-to-fe...

Reducing complexity could also be done if Google released only one major upgrade per year, instead of two. That way it's much less work for manufacturers, too, and most users don't have to be 2 versions behind all the time (like most are on Gingerbread right now). Hopefully Google intends to only release Android 5.0 next year, and that's it. It should also make it easier for developers, who don't have to worry about 5 different API versions at once.
Because employers believe that P(workplace violence/poor time management/etc | meth head) > P(workplace violence/poor time management/etc).

Do you disagree that this is the case?
Deploying Postgres stored procedures
It's REST, it must be good.
No it isn't essential.

For the second, you said it was the contextual background of any clinical study, before then going on to compare clinical studies which you are now saying shouldn't be compared.
To my knowledge it is packaged only for Ubuntu, but it does work perfectly on centos.
Apparently the driver situation is much different on phones.
All the different SoCs need extra drivers, the graphic chips, the display, everything. It's very different on a PC (where you may have upgrade problems as well, if you have hardware that has no drivers for your new OS) and it's especially easy for a Mac.
Most people living in poverty have 0 jobs (and are not looking for one), not 3.

http://www.bls.gov/cps/cpswp2007.pdf

The belief in the hardworking poor person who can't get ahead is also a romanticization of poverty.
You know what

Users can cry me a river.

Motorola has repeatedly broken their promises. This is not the first time a new phone is not upgraded.

I won't touch a Motorola phone, yes, even with Google. I may opt for a Android phone next, but other manufacturers have presented more upgrade options.

Incompetence runs deeply in some organizations

This is a big sore thumb for Android, something that Google should really enforce against the big vendors.
The Psychology of the Powerful
> What I'm more interested in is how SQLite reached such substantial test coverage.

Because SQLite was designed for testability. No "techniques or tools" will help when the application isn't created with testability in mind from the outset.
Things I learned at JavaOne 2012
Don't forget `destroy`.
How to create a killer call graph for impact analysis
> They're perfectly happy with the speed at which they can edit text and that's fine.

I think they miss the point. Speed editing with vim is not about how many lines you may produce in the day.

It's about the lag between the moment you think about what you want to write and the moment when it's written. Your editor should not be in the way, and that's what vim, when mastered, is all about : you simply don't think about it anymore.

It's for the same reason that vim tries to reduce hand movements, so you won't feel your editor in those extra displacements.
Singapore Model Method
Especially the four colour theorem - the first mathematical theorem to be proved with software. That said, I believe this discussion pertains to the hypothesis -> theory "upgrade", not to theorems.
Same thing for me with HTC ('Hero'.. Really?), and no different now with LG (P990 / Optimus 2x). Update to ICS was promised a year ago. Look at link like this (or any LG source on the net that allows comments) to see angry (and .. childish) people:

https://www.facebook.com/note.php?note_id=334420639902596

So - apart from buying a Nexus device (or maybe a Samsung?), it's the same bullshit w/ every manufacturer, I guess.
متابعة ومشاهدة احتفال انتصار 6 اكتوبر باستاد القاهرة الان بث مباشر
The time you can save with Vim can be significant, depending on the task. However what I think is far more valuable is that Vim doesn't get in the way; it doesn't impede the all-important "flow", and perhaps most importantly it stops you getting bored.

When your muscle memory develops to a certain point, using Vim becomes a subconscious thing. You don't have to think about how to copy all the text in between two quotes and paste it at the end of the document; there are already words in Vim's vocabulary for doing that, so you just do it. You don't need to build mental steps because it becomes completely natural, as easy as typing natural English; and just like in natural language, the more words you know well, the more likely you are to be able to use the right word at the right time, using language effectively.

Equally valuable: Vim takes the repetition out of everything. A technically versed creative mind is wasted on any repetitive task. You should never, ever have to do anything more than twice in development. You should be able to repeat and automate tasks and scarcely think about it. In Vim, this need is met by skilful use of . to repeat actions and q to record macros.

When you edit text optimally, you can concentrate on the task at hand, and the editor stays out of your way and does exactly what you need it to. You don't need to build the "subtask" of making your editor do what you want; you can just do it. I think that people who focus on the time Vim does or doesn't save you are missing the point.
I'm currently living in a van! Me and my long term girlfriend have taken some time from the 9-5 to travel around Europe for a while. Been on the road for almost three months now and it's done wonders for my mental state.y mind is clearer, I'm calmer and I feel better. I'm still trying to work on small projects and I have an osx utility I wrote entirely on the road using my MacBook Pro and the solar panels on the van to power it.

It's not cheap, we are able to live on basically half of what we were living on before, but that's not the point of this journey for us.

If your interested in our travels our blog is here http://www.wanderingeurope.co.uk
I lived in the van Monday-Thursday while working in London (my home is around 130miles to the east). Not a problem and not uncomfortable. I sometimes used the showers at the office but my van is fully equipped with shower,toilet heaters etc. I wasn't the only one doing it either, and after a while you spot other likely vans.
John Carmack on debuggers
The point I was hinting at was that some theorems can be proven by a sufficient body of evidence rather than requiring logical deduction - the four colour theorem being a good example as it was proven by 'brute force' rather than analytically.
And that part of Android is largely closed source, so
phone vendors are on the mercy of chipset makers,
who might not have updating drivers for previous generation hardware as their most important mission.
yes, that's my point, what if I don't have internet? imagine I make an incredible presentation and when I'm going to make my pitch I realize the place doesn't have internet or internet is down...

so many problem with internet can occur that I'm not sure if it's a good idea to use a cloud based service for this purpose
Share your Git Repos Quickly with Friends behind Firewalls
So - yes, it can be installed in parallel (installs as 'Nightly').

It cannot be run in parallel - it seems to reuse the FF session and fight for a shared 'is the app already running' mutex. So you need to quit FF to start 'Nightly'.

And it's the only app so far that I've found that doesn't work with the builtin Administrator account (I'm running a Windows Server 2012 instance here for tests and fooling around. Everything works fine with that account, including IE. This browser refuses to start in Metro mode). Hmmm
The Entropy Key
Yes, I think you've nailed it. See my own reply to this comment.
From what I remember, the gantries were (at the time, a few years ago) able to store about 2 weeks' worth of traffic before tolls would effectively become free.
The startup GuardTime offers exactly this service: http://www.guardtime.com/signatures/

You hash your data, and send the hash to them. They embed the hash in a long hash-chain, and publish the current head of the hash chain in Financial Times every month. Once the hash chain head has been published, it is impossible to forge the signed content without destroying all copies of the newspaper in existence.

It seems that the service is free for basic use, only availability SLAs and customer support is paid.